[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2281
  • Last Modified:

Need site to site vpn help

Hi, I am trying to get a simple vpn tunnel up and running between two sites. One end uses a juniper netscreen firewall and the other end is a pfsense software based firewall. Should these two devices have any trouble talking? I feel like I am 85% complete but am missing some steps. This is my first attempt of a vpn tunnel. If anyone has done this between these two devices and has any input or patience to work with me that would be greatly appreciated.

Thanks!
0
System
Asked:
System
  • 2
2 Solutions
 
SystemAuthor Commented:
Hi,
  It appears my link is actually up but I can't ping between the subnets. Do I have to do routing and so forth to make this happen? I assume by providing the local subnets during the setup that I wouldn't need to touch the routing?

Thanks
0
 
Roachy1979Commented:
You will need to specify the local and remote network address range on both of the devices, so that the gateway on each network knows to push traffic down the VPN tunnel for the rmeote networks rather than just trying to resolve on the www.

See this page here for an explaination of the fields on the pfsense....although I'm not experienced with the juniper, it looks like you've done the hard bit if you've got the connection negotiated :)  It's all downhill from here....

http://doc.pfsense.org/index.php/VPN_Capability_IPSec#Site_to_Site_VPN_Explained
0
 
SysExpertCommented:
ALso note that the tunnel should work OK if  you are not filtering traffic, and both ends are fixed IPs.

If you have one end DHCP, then it is the side that needs to initiate traffic ( ping the other side )


I hope this helps !
0
 
SystemAuthor Commented:
Hi guys,
   Both ends are static IP. I think the problem is with the juniper. It says the VPN link is up but the tunnel interface is down. Not sure how that can be
0

Featured Post

Upgrade your Question Security!

Add Premium security features to your question to ensure its privacy or anonymity. Learn more about your ability to control Question Security today.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now